NewAE Technology ChipWhisperer-Lite

NewAE Technology ChipWhisperer-Lite (CW1173) is a low-cost device that allows design engineers and students to conduct Differential Power Analysis (DPA) and explore glitch vulnerabilities in the user's hardware projects. The ChipWhisperer-Lite is part of an open-source toolchain for embedded hardware security research.

Differential Power Analysis is a side-channel attack based on information gained from the physical design of an embedded system rather than code weaknesses or software bugs. Power consumption, timing, electromagnetic field, and other sources can be exploited to break into an embedded system, even one based on the AES-128 or AES-256 Advanced Encryption Standards. The ChipWhisperer-Lite integrates hardware for performing power analysis measurement, device programming, glitching, serial communications, and an example target that can be loaded with cryptographic algorithms into a single board. The ChipWhisperer-Lite can also act as a programmer for XMEGA (PDI) and STM32Fx (serial bootloader) devices.

The single-board ChipWhisperer-Lite version is available with either a Microchip Technology / Atmel XMEGA target or an STMicroelectronics STM32F3 Arm® target. The target section of the board can be broken off to allow the capture portion of the board to connect to other Targets. The ChipWhisperer-Lite is also available in a 2-part variant, which features gold-plated connectors and includes cables and adapters, making it easier to connect to other target boards. Finally, a capture-only version comes with the capture portion of the board and does not include a target MCU. Both the hardware and software of the ChipWhisperer-Lite are open-source, allowing developers to modify them for the user's specific needs.

Features

  • Low-cost, open-source device for testing side-channel power analysis and glitch vulnerabilities in hardware projects
  • 10-bit ADC with 105MS/s sampling rate combined with up to +55dB gain amplifier measures small signals easily
  • Advanced synchronous clock-locking logic samples target power on related clock edges, drastically reducing sample rate requirements compared to power analysis performed with standard oscilloscopes
  • Clock and voltage fault injection is possible using FPGA-based pulse generation
  • Single-board solution ideal for teaching and training environments
  • Board design allows easy separation of capture and target for future expansion
  • Acts as a programmer for XMEGA (PDI), and STM32Fx (serial bootloader) devices, meaning no external equipment is required

Specifications

  • ADC Specifications: 10-bit ADC, 105MS/s maximum sample rate
  • ADC Sample Clock Source: Internal generator, external input (direct or with 4x multiplier or phase adjuster)
  • Analog Input: AC-Coupled, up to +55dB adjustable gain
  • GPIO Types: Serial, clock, Logic line
  • GPIO Voltage: 3.3V
  • Clock Generation Range: 5MHz to 200MHz
  • Clock Output Type: Regular, With glitch inserted, Only output glitch
  • Glitch Width (min): ~4nS (depends on cabling used for routing glitch output)
  • Glitch Offset: Adjustable in < 200pS increments
  • Voltage Glitch Type: High-power and low-power crowbar circuitry
  • Crowbar Pulse Current: 20A
  • USB Interface: Custom open-source USB firmware, up to 25MB/s
  • Sample Buffer Size: 24573
  • Programming Protocols: Atmel PDI (for XMEGA), STM32Fx Bootloader

Videos

Product Guide

  • NAE-CWLITE
    • Single-board
    • Microchip Technology/Atmel ATXMEGA128D4 Target
  • NAE-CWLITE-2PART
    • Separate Capture and Target Boards
    • Microchip Technology/Atmel ATXMEGA128D4 Target
    • Includes 2x SMA cables, 2x SMA to BNC adapters, 20-pin cable
  • NAE-CWLITE-ARM
    • Single Board
    • STMicroelectronics STM32F303RCT7 Target
  • NAE-CWLITE-CAPTURE
    • Capture Board only,
    • Includes 2x SMA cables, 2x SMA to BNC adapters, 20-pin cable

Board Layout

NewAE Technology ChipWhisperer-Lite

Optional Accessories

CANoodler (NAE-CANOODLER) 
NewAE Technology CANoodler offers a simple CAN interface with a logic-level 3.3V output. The CANoodler is to be used with microcontroller targets that include a CAN block. The CANoodler uses a pinout present on select ChipWhisperer UFO Target Boards.

Advanced Breakout Board (NAE-CW506-02)
NewAE Technology Advanced Breakout Board allows the ChipWhisperer Pro (CW1200) or the ChipWhisperer-Lite (CW1173) Capture Tools to provide level shifting for interfacing from 1.5V to 5.0V device I/Os. The Breakout Board also provides breakouts for connecting other equipment, such as logic analyzers and oscilloscopes, to data or clock lines.

H-Field Probe (NAE-HPROBE-15)
NewAE Technology H-Field Probe allows the ChipWhisperer Pro (CW1200) or the ChipWhisperer-Lite (CW1173) Capture Tools to perform side-channel power analysis on a target without inserting a series shunt resistor. It allows testing to be easily performed on devices simply by holding the probe over the chip.

Probe Set (NAE-PBSET-PSU)
NewAE Technology Probe Set includes an H-Field Probe, a Differential Probe, and a Low Noise Amplifier. These probes allow the ChipWhisperer Pro (CW1200) or the ChipWhisperer-Lite (CW1173) Capture Tools to interface easily and attack separate boards and devices. The separate Probe Power Supply is isolated to break ground loops that may be present when powering the probe from the front-panel USB of an oscilloscope.

Veröffentlichungsdatum: 2018-03-21 | Aktualisiert: 2023-03-13